CVE-2015-5640

Description

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

Affected packages (1)

• Packagist/baserproject/basercmsfrom 0, < 3.0.8

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2015-5640
• PATCHhttps://github.com/baserproject/basercms
• WEBhttp://basercms.net/security/JVN04855224
• WEBhttp://jvndb.jvn.jp/jvndb/JVNDB-2015-000138
• WEBhttp://jvn.jp/en/jp/JVN04855224/index.html